CVE Feed

    Dashboard / CVE / CVE-2026-102693

    CVE-2026-102693

    RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.

    Published:Oct 16, 2026
    Last Modified:Oct 17, 2026
    EPS:Oct 16, 2026
    EPSS Score:
    CVSS Score:9.6

    Affected Products

    Vendor
    Riot-os
    Product
    Riot

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-49868 (CVSS 9.8) — RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…
    CVE-2026-102692 (CVSS 9.1) — RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…
    CVE-2026-107838 (CVSS 7.5) — RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…
    CVE-2026-107837 (CVSS 8.2) — RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…
    CVE-2026-107836 (CVSS 7.1) — RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…
    CVE-2026-27703 (CVSS 7.5) — RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi…
    CVE-2026-25139 (CVSS 8.7) — RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi…
    CVE-2026-22214 (CVSS 6.8) — RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in …
    CVE-2026-22213 (CVSS 2.4) — RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in …
    CVE-2025-66647 (CVSS 1.7) — RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High